JP5978742B2 - Communication apparatus, image forming apparatus, information processing method and program thereof - Google Patents

Description

  The present invention relates to a communication apparatus, an image forming apparatus, an information processing method, and a program thereof.

  Conventionally, a communication apparatus that performs communication using an electronic certificate is known. For example, the communication device described in Patent Document 1 describes a communication device such as a printer that performs authentication processing using a stored electronic certificate and is connected to a network when the authentication processing is successful. In this communication apparatus, when the expiration date of the electronic certificate is equal to or less than a predetermined number of days, a guidance for urging acquisition of a new electronic certificate is notified from the network management apparatus. This prevents the user from overlooking the expiration date of the electronic certificate.

JP 2008-42381 A

  By the way, when a new electronic certificate is obtained instead of the old electronic certificate that was used and stored in the communication device, the new electronic certificate is incorrect or settings related to the new electronic certificate If a mistake is made, communication using a new electronic certificate becomes impossible. At this time, if the old electronic certificate is also deleted, there is a problem that communication using the electronic certificate cannot be performed until a new electronic certificate is acquired again. For example, it may be possible to temporarily enable a communication device to communicate without using an electronic certificate, but in that case, it is necessary to invalidate the security of the communication destination device or network. There was a problem.

  The present invention has been made in view of the above-described problems, and has as its main object to enable communication using an electronic certificate even when communication using a new electronic certificate fails.

  The present invention adopts the following means in order to achieve the above-mentioned object.

The communication device of the present invention
Storage means having a first storage area and a second storage area capable of storing an electronic certificate;
Communication means for performing communication using an electronic certificate stored in the first storage area;
When the first electronic certificate stored in the first storage area is updated to the second electronic certificate, the first electronic certificate is stored in the second storage area, and the first electronic certificate is stored in the first storage area. A certificate updating means for making the second electronic certificate stored in the first storage area instead of the electronic certificate;
A certificate that sets the first electronic certificate stored in the second storage area to the state stored in the first storage area when the communication unit fails in the communication using the second electronic certificate Recovery measures,
It is equipped with.

  In the communication apparatus of the present invention, when the first electronic certificate stored in the first storage area is updated to the second electronic certificate, the first electronic certificate is stored in the second storage area. At the same time, the second electronic certificate is stored in the first storage area instead of the first electronic certificate. When the communication unit that performs communication using the electronic certificate stored in the first storage area fails in communication using the second electronic certificate, the first electronic certificate stored in the second storage area Is stored in the first storage area. As described above, when the first electronic certificate is updated to the second electronic certificate, the first electronic certificate is saved in the second storage area, and the communication unit performs communication using the second electronic certificate. When it fails, the first electronic certificate stored in the second storage area is restored to the first storage area. By doing so, since the first electronic certificate is more likely to have been used for communication than the second electronic certificate, the first electronic certificate stored again in the first storage area is used. May be able to communicate. That is, communication using the electronic certificate can be performed even when communication using the new electronic certificate (second electronic certificate) fails. Here, communication using an electronic certificate is, for example, an authentication process that authenticates itself by using an electronic certificate and authenticates a communication destination device, or a process that includes an authentication process, and then establishes a connection. This includes performing communication and performing communication encrypted using a public key included in an electronic certificate. Further, the communication using the electronic certificate may be one-to-one communication with a communication destination device, or may be performed by connecting to a network to which a plurality of devices are connected. There may be. Further, the communication may be wired or wireless. The storage means may be composed of a plurality of storage devices or storage media. For example, the storage unit may include a nonvolatile memory and a volatile memory, the first storage area may be an area in the nonvolatile memory, and the second storage area may be an area in the volatile memory. Each of the first storage area and the second storage area may be composed of a plurality of storage devices or storage media.

  In this case, when updating the first electronic certificate stored in the first storage area to the second electronic certificate, the certificate updating means stores the first electronic certificate in the second storage area. And storing the first electronic certificate from the first storage area and storing the second electronic certificate in the first storage area, wherein the communication means uses the second electronic certificate. When communication fails, the first electronic certificate stored in the second storage area may be stored in the first storage area.

  In the communication apparatus according to the present invention, the certificate restoration means may use the first electronic certificate stored in the second storage area when the communication means fails in the communication using the second electronic certificate. The first electronic certificate may be stored in the area at the position stored in the first storage area before the update. In this way, the first electronic certificate can be returned to the original position of the first storage area, and the first storage area can be returned as close as possible to the state before the update. That is, the first storage area can be returned as close as possible to the state when communication using the first electronic certificate was possible. Thereby, even when communication using a new electronic certificate fails, communication using the electronic certificate can be more reliably made possible.

  In the communication apparatus according to the present invention, the certificate updating means updates the first electronic certificate and the first electronic certificate when updating the first electronic certificate stored in the first storage area to the second electronic certificate. Corresponding position information indicating the position of the first electronic certificate stored in the storage area is stored in the second storage area in association with the second electronic certificate. The first electronic certificate may be stored in the position area in the first storage area represented by the position information associated with the first electronic certificate when the communication using the key fails. Good. This makes it possible to reliably return the first electronic certificate to the original position in the first storage area using the position information.

  In the communication apparatus according to the present invention, the certificate restoration means deletes the second electronic certificate from the first storage area when the communication means fails in the communication using the second electronic certificate. It is good. In this way, for example, the second electronic certificate that has failed in communication is restored, such as communication failure after using the second electronic certificate in communication after restoring the first electronic certificate to the first storage area. It is possible to prevent adverse effects on subsequent communications. In this case, when the communication unit fails in the communication using the second electronic certificate, the certificate restoration unit uses the first electronic certificate stored in the second storage area as the first electronic certificate. The second electronic certificate in the storage area may be overwritten and stored.

  The communication device according to the present invention is configured to store at least that the first electronic certificate is stored in the first storage area or has been stored when the communication unit fails in the communication using the second electronic certificate. It is good also as a thing provided with the alerting | reporting means which alert | reports either. In this way, when communication using the second electronic certificate fails, the user may be notified that there is a possibility of communication using the first electronic certificate restored to the first storage area. it can.

  In the communication apparatus according to the present invention, the storage means can store a plurality of electronic certificates in the first storage area, and the certificate update means stores the second electronic certificate in the first storage area. The plurality of electronic devices based on the predetermined attached information attached to the second electronic certificate and the predetermined attached information attached to each of the plurality of electronic certificates stored in the first storage area. It is also possible to determine which of the electronic certificates is the first electronic certificate to be updated to the second electronic certificate, and update the determined first electronic certificate to the second electronic certificate Good. If it carries out like this, an electronic certificate can be updated more appropriately and it can suppress more that the communication using the updated 2nd electronic certificate fails. Here, the attached information may be at least a part of information constituting the electronic certificate such as information included in the basic area or the extended area of the electronic certificate, and is not a part of the electronic certificate. It may be information associated with an electronic certificate. In addition, the determination of the first electronic certificate to be updated based on the attached information is performed by determining, for example, an electronic certificate attached with attached information that matches the attached information of the second electronic certificate as the first electronic certificate. Alternatively, it may be performed by determining the electronic certificate attached with the attached information having the highest degree of coincidence with the attached information of the second electronic certificate as the first electronic certificate.

  In the communication apparatus according to the present invention, the certificate restoration means may use the first electronic certificate stored in the second storage area when the communication means has succeeded in the communication using the second electronic certificate. It may be deleted. In this way, the first electronic certificate that is no longer needed can be quickly deleted from the second storage area. As a result, the storage area can be released, and leakage of confidential information such as personal information included in the first electronic certificate can be suppressed.

  In the communication apparatus according to the present invention, the certificate restoration unit receives a notification from the communication destination that the communication unit attempts the communication using the second electronic certificate and that there is an error in the second electronic certificate. The first electronic certificate stored in the second storage area may be stored in the first storage area. In this way, when communication fails due to the second electronic certificate, the first electronic certificate is restored to the first storage area, thereby enabling more reliable communication using the electronic certificate. it can. In this case, it is assumed that the certificate restoration unit does not store the first electronic certificate in the first storage area when the communication fails for a reason other than an error of the second electronic certificate. Also good.

  In the communication apparatus according to the present invention, the communication means performs the communication by connecting to a predetermined network by authentication using an electronic certificate stored in the first storage area, and the certificate updating means The electronic certificate may be obtained via the network. If the electronic certificate can be obtained via the network, it is possible to connect to the network again by enabling communication using the electronic certificate even when communication using the second electronic certificate fails. Since a new electronic certificate can be obtained, the significance of applying the present invention is high.

The image forming apparatus of the present invention includes:
The communication device of the present invention according to any one of the aspects described above;
An image forming means capable of forming an image based on image data acquired by the communication by ejecting a fluid on a medium;
It is equipped with.

  Since the image forming apparatus of the present invention includes the communication apparatus of the present invention in any of the above-described aspects, the same effect as the communication apparatus of the present invention described above, for example, communication using a new electronic certificate has failed. Even when this is done, the effect of enabling communication using an electronic certificate can be obtained. In addition, since the image forming unit can form an image based on the image data acquired by communication on the medium, even when communication using a new electronic certificate fails, image data is acquired by communication using the electronic certificate. Therefore, the significance of enabling image formation is high.

The information processing method of the present invention includes:
A communication apparatus comprising: storage means having a first storage area and a second storage area capable of storing an electronic certificate; and communication means for performing communication using the electronic certificate stored in the first storage area Information processing method,
(A) When updating the first electronic certificate stored in the first storage area to the second electronic certificate, the first electronic certificate is stored in the second storage area; Placing the second electronic certificate in the first storage area instead of the first electronic certificate;
(B) When the communication means fails in the communication using the second electronic certificate, the first electronic certificate stored in the second storage area is stored in the first storage area. And steps to
Is included.

  In the information processing method of the communication device according to the present invention, when the first electronic certificate stored in the first storage area is updated to the second electronic certificate, the first electronic certificate is stored in the second storage area. And the second electronic certificate is stored in the first storage area instead of the first electronic certificate. When the communication unit that performs communication using the electronic certificate stored in the first storage area fails in communication using the second electronic certificate, the first electronic certificate stored in the second storage area Is stored in the first storage area. By doing so, there is a high possibility that the first electronic certificate has been used for communication so far, so there is a possibility that communication can be performed using the first electronic certificate stored again in the first storage area. That is, communication using the electronic certificate can be performed even when communication using the new electronic certificate fails. In this information processing method of the communication device, various aspects of the communication device described above may be adopted, and steps for realizing each function of the communication device described above may be added.

  The program of the present invention causes one or more computers to realize each step of the information processing method described above. This program may be recorded on a computer-readable recording medium (for example, hard disk, ROM, FD, CD, DVD, etc.) or from a computer via a transmission medium (communication network such as the Internet or LAN). It may be distributed to another computer, or may be exchanged in any other form. If this program is executed by a single computer or if each step is shared and executed by a plurality of computers, each step of the information processing method described above is executed. can get.

1 is a configuration diagram of a network system 10 including a multifunction machine 20 according to the present embodiment. Explanatory drawing of the 1st storage area 41 and the 2nd storage area 42. FIG. The flowchart which shows an example of a communication connection establishment routine. The flowchart which shows an example of an electronic certificate update process routine. Explanatory drawing which shows a mode that an electronic certificate is updated and restored.

  Next, embodiments of the present invention will be described with reference to the drawings. FIG. 1 is a configuration diagram showing an outline of a configuration of a network system 10 including a multi-function device 20 which is an embodiment of a communication apparatus and an image forming apparatus of the present invention. As illustrated, the network system 10 includes a LAN 12 having an authentication switch 60, a multi-function device 20 and a user PC 50 connected to the LAN 12 via the authentication switch 60, and an authentication server 70 connected to the LAN 12. Yes.

  The LAN 12 is configured as a network that conforms to the IEEE 802.1X standard and includes an authentication switch 60. The authentication switch 60 is configured as a switching hub with an authentication function, and includes a communication port control unit 61 that controls a communication port (not shown) of the authentication switch 60, and the MFP 20 and the user PC 50 that are connected to the communication port. A communication interface (I / F) that is a device that communicates with the communication device authentication unit 62 that performs device authentication, the storage unit 63 that stores various programs and various data, and the MFP 20, the user PC 50, the authentication server 70, and the like. 64). The authentication switch 60 is connected to the LAN 12, the multifunction device 20, and the user PC 50 via the communication I / F 64. The communication port control unit 61 has a function of detecting information transmitted from a device connected to a communication port such as the multifunction machine 20 or the user PC 50 and causing the communication device authentication unit 62 to start authentication processing. Further, the communication port control unit 61 has a function of permitting connection to the LAN 12 for a device that has succeeded in the authentication process and blocking connection to the LAN 12 for a device that has failed the authentication process. The communication device authentication unit 62 has a function of mediating authentication processing between a device (also referred to as a client) connected to the authentication switch 60 such as the multifunction device 20 or the user PC 50 and the authentication server 70. Specifically, the communication device authentication unit 62 converts the MAC frame received from the client side such as the MFP 20 or the user PC 50 in the authentication process into a RADIUS frame and transmits it to the authentication server 70 or receives it from the authentication server 70. The converted RADIUS frame is converted into a MAC frame and transmitted to the client. The communication device authentication unit 62 has a function of making a re-authentication request at regular intervals (for example, every 60 minutes) for a client that has succeeded in the authentication process. In the present embodiment, the authentication process performed via the authentication switch 60 is performed by the EAP-TLS method as an authentication protocol (EAP) in IEEE 802.1X. The EAP-TLS method is a method for performing authentication using an electronic certificate. The storage unit 63 stores information used for authentication processing, such as authentication server information 66 that is information about the authentication server 70.

  The multifunction machine 20 is a device that functions as a scanner as well as a printer. Image data, an electronic certificate, and the like are transmitted via a network from another device (for example, the user PC 50) connected to the network such as the LAN 12 via the network. It is a device that can acquire the data and send scanned image data to other devices via a network. The multi-function device 20 is connected to the authentication switch 60 via a communication I / F 26 by, for example, a LAN cable. The multi-function device 20 includes a printing mechanism 21 that forms an image based on image data on a medium such as paper, a reading mechanism 22 that scans an image on a medium such as paper into image data, and displays various types of information to the user. And an operation panel 23 for inputting various instructions from the user, and a controller 30 for controlling the entire apparatus. The printing mechanism 21 is an ink jet type mechanism that executes a printing process in which an image based on image data is formed on a medium by applying pressure to each color ink and discharging the pressurized ink onto the medium. The mechanism for applying pressure to the ink may be due to deformation of the piezoelectric element or due to the generation of bubbles due to the heat of the heater. Also, the reading mechanism 22 is configured as a scanner mechanism that scans a known color image sensor that separates reflected light after emitting light toward a document placed on a glass table into each color and uses it as read data to read a document. Has been. The operation panel 23 includes a display unit configured as a liquid crystal display for displaying an image, and an operation unit on which keys for a user to make various inputs are arranged. The display unit outputs various information to the user, An instruction from the user is input from the operation unit.

  The controller 30 of the multi-function device 20 is configured as a microprocessor centered on a CPU 31, and a RAM 32 that temporarily stores data and saves data, and various processing programs and various data that can be rewritten. And a flash memory 33. The flash memory 33 stores communication setting information 40 for communicating with other devices via the communication I / F 26. The communication setting information 40 includes, for example, an authentication method, a user ID, and a server ID as information for performing communication according to IEEE 802.1X. The communication setting information 40 includes a root CA certificate and an intermediate CA certificate. The flash memory 33 also stores a first storage area 41 for storing an electronic certificate (also referred to as a client certificate) for certifying the MFP 20 itself, and an electronic certificate stored in the first storage area 41. And a second storage area 42 as a temporary area for temporary storage. FIG. 2 is an explanatory diagram of the first storage area 41 and the second storage area 42 stored in the flash memory 33. As shown in the figure, the first storage area 41 has three areas, areas 1 to 3 provided at different predetermined positions in the first storage area 41, and each area 1 to 3 has an electronic certificate and The usage setting information is associated with each other and can be stored one by one. Specifically, the area 1 stores the electronic certificate A and its usage setting information, the area 2 stores the electronic certificate B and its usage setting information, and the area 3 stores the electronic certificate C and its usage. Setting information is stored. Here, the usage setting information is attached information attached to the electronic certificate, and includes information used when performing communication using the electronic certificate, and other information related to the electronic certificate. In the present embodiment, the usage setting information includes a protocol that uses the electronic certificate as information indicating the use of the electronic certificate. Specifically, the usage setting information of the electronic certificate A includes information that the usage of the electronic certificate A is IEEE 802.1X, and the usage setting information of the electronic certificate B includes the usage of the electronic certificate B. Includes information indicating that SSL / TLS is used, and the usage setting information of the electronic certificate C includes information indicating that the use of the electronic certificate B is IPsec. As described above, the MFP 20 according to the present embodiment supports SSL / TLS and IPsec protocols in addition to the electronic certificate A corresponding to IEEE802.1X, which is a protocol for performing communication with the authentication switch 60, respectively. A corresponding electronic certificate is stored, and communication is possible using an electronic certificate corresponding to a protocol for connection with a communication destination device. The electronic certificate stored in the first storage area 41 or the second storage area 42 is associated with an intermediate CA certificate or a root CA certificate included in the communication setting information 40 to form a certificate chain. ing. The controller 30 inputs various operation signals and various detection signals from the printing mechanism 21 and the reading mechanism 22, inputs an operation signal generated according to the operation of the operation unit of the operation panel 23, and from other devices. Various types of transmitted data are input from the communication I / F 26. In addition, the controller 30 outputs a command to the printing mechanism 21 to print an image, outputs a command to the reading mechanism 22 to read a document, or displays a display command or image data to be displayed on the display unit of the operation panel 23. Output various data to be transmitted to other devices to the communication I / F 26.

  The controller 30 includes a communication control unit 34, a certificate update unit 35, and a certificate restoration unit 36 as functional blocks. The communication control unit 34 controls communication with other devices connected via the communication I / F 26. The communication control unit 34 has a function of performing communication such as authentication processing using the electronic certificate stored in the first storage area 41. For example, when communicating by connecting to the LAN 12, the communication control unit 34 performs authentication processing according to the authentication server 70 and the EAP-TLS system in IEEE 802.1X via the authentication switch 60, or after successful authentication processing. Send and receive data. The communication control unit 34 refers to the communication setting information 40 as necessary when performing communication. The certificate updating unit 35 has a function of updating an electronic certificate stored in the first storage area 41 to a new electronic certificate, and an old electronic certificate to be updated at the time of update and its use The setting information is stored in the second storage area 41, or the old electronic certificate and its usage setting information are deleted from the first storage area 41, and the new electronic certificate and its usage setting information are stored in the first storage area 41. Or When the communication control unit 34 fails in communication using an electronic certificate such as authentication processing according to the EAP-TLS method in IEEE802.1X, the certificate restoration unit 36 stores the old data stored in the second storage area 42. It has a function of storing the electronic certificate and its usage setting information in the first storage area 41.

  The user PC 50 is a well-known general-purpose personal computer, and is a device capable of transmitting and receiving data via a network by communicating with other devices (for example, the multifunction machine 20 and the authentication server 70) connected to the network such as the LAN 12. This user PC 50 is connected to the authentication switch 60 via a communication I / F 54 by, for example, a LAN cable. The user PC 50 includes a communication control unit 51 as a functional block including a CPU that executes various controls, a ROM that stores various control programs, a RAM that temporarily stores data, and an HDD that is a large-capacity memory. Storage unit 53. The user PC 50 also includes an input device 59 such as a display 58 for displaying various information on a screen and a keyboard for the user to input various commands. The communication control unit 51 controls communication with other devices connected via the communication I / F 54. The communication control unit 54 has a function of performing, for example, authentication processing or data transmission / reception after successful authentication processing using the communication setting information 56 and the client certificate 57 stored in the storage unit 53. Further, the communication control unit 51 obtains an electronic certificate from a certificate authority (not shown) via the LAN 12, outputs an instruction to transmit it to the multifunction device 20 and installs it, or sends image data to the multifunction device 20. It has a function of outputting and inputting image data read from the multifunction device 20. The storage unit 53 stores communication setting information 56 for communicating with other devices via the communication I / F 54 and a client certificate 57 for certifying the user PC 50 itself.

  The authentication server 70 is configured as a RADIUS server, accepts an authentication request transmitted from a client such as the multi-function device 20 or the user PC 50 via the authentication switch 60, and uses the EAP-TLS method in IEEE 802.1X for the client. This is a device that performs the authentication process and responds with an authentication result. The authentication server 70 is connected to the LAN 12 via the communication I / F 74 and includes a client authentication unit 71 that performs authentication processing and a storage unit 73 that stores various programs and various data. The storage unit 73 stores authentication information 76 that is information used for authentication processing such as a root CA certificate, an intermediate CA certificate, and a client ID, and a server 78 for proving the authentication server 70 itself.

  Next, the operation of the network system 10 according to the present embodiment configured as described above, in particular, the state in which the multifunction device 20 establishes a connection with the LAN 12, and the new electronic certificate stored in the first storage area 41 by the multifunction device 20 A description will be given of how to update the electronic certificate by acquiring the password from the user PC 50 and how to restore the old electronic certificate before the update when the multifunction device 20 fails to establish a connection with the LAN 12.

  First, a state in which the MFP 20 performs authentication processing of the IEEE 802.1X EAP-TLS method with the authentication server 70 via the authentication switch 60 to establish a connection to the LAN 12 will be described. FIG. 3 is a flowchart showing an example of a communication connection establishment routine executed by the CPU 31 of the controller 30. This routine is stored in the flash memory 33 and executed when the power of the multifunction device 20 is turned on and the multifunction device 20 and the authentication switch 60 are connected by a LAN cable or the like. This routine is executed by the CPU 31 of the controller 30 using the functions of the communication control unit 34 and the certificate restoration unit 36.

  When this communication connection establishment routine is executed, the communication control unit 34 first transmits an EAPOL start frame as a connection request to the authentication switch 60 (step S100), and an EAP request (ID) that is a response from the authentication switch 60. Waiting to receive (request) (step S110). When the EAP request (ID request) is received, an EAP response (ID notification), which is an authentication request with the user ID of the multifunction device 20 itself, is transmitted (step S120). The authentication switch 60 transmits a RADIUS access request (ID notification) generated based on the EAP response (ID notification) received from the multifunction machine 20 to the authentication server 70 via the LAN 12. The authentication server 70 confirms the user ID included in the RADIUS access request (ID notification), transmits a RADIUS access challenge (TLS start) to the authentication switch 60, and starts user authentication by TSL. Upon receiving a RADIUS access challenge (TLS start) from the authentication server 70, the authentication switch 60 transmits an EAP request (TLS start) to the multi-function device 20.

  The communication control unit 34 waits to receive this EAP request (TLS start) from the authentication switch 60 (step S130), and when received, transmits an EAP response (client_hello) to the authentication switch 60 as a response (step S140). Upon receiving the EAP response (client_hello) from the multi-function device 20, the authentication switch 60 transmits a RADIUS access request (response through) to the authentication server 70. Upon receiving this, the authentication server 70 sends a RADIUS access challenge (server certificate) including information such as a server certificate 78 that proves itself and a root CA certificate and an intermediate CA certificate for verifying the server certificate 78 to the authentication switch 60. Send to. Upon receiving this, the authentication switch 60 transmits an EAP request (request through) to the multi-function device 20.

  The communication control unit 34 waits to receive this EAP request (request through) from the authentication switch 60 (step S150), and when received, verifies the server certificate included in the EAP request (request through) (step S150). S160). For example, if the server certificate has not expired or the certificate chain of the server certificate is confirmed, the server certificate and the root CA certificate or intermediate CA certificate associated with it can be trusted. Confirm that it is a certificate.

  Subsequently, the communication control unit 34 checks the usage setting information of the electronic certificate stored in the first storage area 41, and specifies an electronic certificate (client certificate) whose usage is IEEE802.1X (step S170). ). For example, when the electronic certificates A to C shown in FIG. 2 are stored in the first storage area 41, the electronic certificate A whose usage is IEEE 802.1X is specified. Then, the communication control unit 34 transmits an EAP response (client certificate) including information such as the specified electronic certificate and a root CA certificate and an intermediate CA certificate for verifying it to the authentication switch 60 ( Step S180).

  Upon receiving the EAP response (client certificate) from the multifunction device 20, the authentication switch 60 transmits a RADIUS access request (response through) to the authentication server 70. The authentication server 70 verifies the client certificate of the multi-function device 20 included in the RADIUS access request (response through), and transmits a RADIUS access challenge (encryption method) to the authentication switch 60 when it is confirmed that the client certificate is reliable. . On the other hand, when there is a problem with the client certificate, for example, when the client certificate has expired or when the reliability of the root CA certificate associated with the client certificate cannot be confirmed, the authentication server 70 A failure response is transmitted to the authentication switch 60. The authentication switch 60 transmits an EAP request (request through) to the multi-function device 20 when a RADIUS access challenge (encryption method) is received from the authentication server 70, and sends a failure response to the multi-function device when receiving a failure response from the authentication server 70. 20 to send.

  The communication control unit 34 waits until receiving this Failure response from the authentication switch 60 (Step S190) or receiving an EAP request (Request Through) (Step S200). When an EAP request (request through) is received, it waits for further EAP success from the authentication switch 60 (step S210), and when EAP success is received, it waits for reception of an EAPOL key from the authentication switch 60 (step S210). S220). When the EAPOL key is received, it is stored in the RAM 32 of the controller 30 (step S230), and this routine is terminated. As a result, the connection of the multifunction device 20 to the LAN 12 is completed, and thereafter, data can be exchanged with the authentication switch 60 and devices connected to the LAN 12 by encrypted communication using the EAPOL key. When a failure response is received from the authentication switch 60 in step S190, that is, when connection establishment fails due to a problem in the client certificate transmitted in step S180, the certificate restoration unit 36 performs step The electronic certificate restoration process of S240 to S290 is performed, which will be described later.

  Next, how the multifunction device 20 acquires a new electronic certificate stored in the first storage area 41 from the user PC 50 and updates the electronic certificate will be described. FIG. 4 is a flowchart illustrating an example of an electronic certificate update processing routine. In this routine, the MFP 20 and the user PC 50 are both connected to the LAN 12, and the user PC 50 transmits an installation command for installing a new electronic certificate and usage setting information to the MFP 20 via the LAN 12. The installation command is executed when the multifunction device 20 receives the installation command. This routine is executed by the CPU 31 of the controller 30 using the functions of the communication control unit 34 and the certificate update unit 35.

  Note that the user of the user PC 50 transmits a CSR (certificate signature request) including information on the applicant in advance to a certificate authority (not shown) via a network such as the LAN 12 or the Internet. Get a good electronic certificate. Then, the usage setting information associated with the acquired electronic certificate is input via the input device 59 to instruct transmission to the multifunction device 20. As a result, the communication control unit 51 transmits an installation command to the multi-function device 20 via the LAN 12. The reason for installing a new certificate is that the electronic certificate already stored in the first storage area 41 is about to expire, the setting of the LAN 12 or the authentication server 70 is changed, the authentication server 70 is replaced, etc. For example, the electronic certificate stored in the first storage area 41 cannot be used. Also, when installing an electronic certificate for the first time in the first storage area 41, the user inputs to send an installation command for installing a new electronic certificate and usage setting information to the multi-function device 20 in the same manner as described above. The multi-function device 20 that has received an installation instruction by inputting an instruction via the device 59 executes an electronic certificate update processing routine.

  When this electronic certificate update processing routine is executed, the certificate update unit 35 first acquires a new electronic certificate and usage setting information associated therewith from the user PC 50 via the LAN 12 (step S300). ). Next, the usage of the electronic certificate included in the acquired usage setting information is examined, and it is determined whether or not an electronic certificate having the same usage is stored in the first storage area 41 (step S310). When the electronic certificate having the same usage is stored in the first storage area 41, the electronic certificate and the usage setting information are stored in the second storage area 42 in association with the position information in the first storage area 41 ( Step S320). Here, the position information is information representing the position of the electronic certificate in the first storage area 41, and in the present embodiment is information representing any one of "area 1", "area 2", and "area 3". did. Then, when the electronic certificate whose usage matches in step S310 is not stored in the first storage area 41, or after step S320, the new electronic certificate and usage setting information acquired in step S300 are stored in the first storage area. 41 (step S330), and this routine is finished. Note that if there is an electronic certificate whose usage matches in step S320, the new electronic certificate and usage setting information are deleted from the first storage area 41 and the new electronic certificate is used at the same position. And use setting information are stored, that is, overwritten. As described above, in the electronic certificate update processing routine, when there is an electronic certificate having the same use as the new electronic certificate in the first storage area 41, the electronic certificate is determined as the old electronic certificate to be updated. The electronic certificate is stored in the second storage area 42, and the old electronic certificate in the first storage area 41 is overwritten and updated by the new electronic certificate.

  Next, the electronic certificate restoration process in steps S240 to S290 in the communication connection establishment routine of FIG. 3 will be described. When the failure response is received from the authentication switch 60 in step S190 described above, the certificate restoration unit 36 checks whether or not an electronic certificate is stored in the second storage area 42 (step S240). When the electronic certificate is stored in the second storage area 42, the electronic certificate transmitted in the immediately preceding step S180, that is, the electronic certificate that failed in client authentication and the electronic that was in the same position in the first storage area 41. It is checked whether or not the certificate is stored in the second storage area 42 (step S250). This process is performed by examining the position information associated with the electronic certificate stored in the second storage area 42. When the electronic certificate that was in the same position as the electronic certificate that failed to be authenticated is stored in the second storage area 42, the electronic certificate is stored in the corresponding position in the first storage area 41 (step). S260). That is, the electronic certificate and usage setting information are overwritten and stored at the position of the first storage area 41 represented by the position information associated with the electronic certificate of the second storage area 42. As described above, when the authentication by the electronic certificate stored in the first storage area 41 fails, if the electronic certificate that is in the same position as the electronic certificate is in the second storage area 42, the authentication fails. The deleted electronic certificate is deleted from the first storage area 41, and the electronic certificate stored in the second storage area 42 is restored to the first storage area 41.

  Next, the certificate recovery unit 36 indicates that authentication with the electronic certificate stored in the first storage area 41 has failed, deletes the failed electronic certificate, and recovers the electronic certificate before the update. Then, a recovery completion display screen (not shown) that prompts the user to input an instruction as to whether or not to reconnect with the restored electronic certificate is displayed on the display unit of the operation panel 23 (step S270). Then, it is determined whether or not an instruction to perform reconnection from the user is input via the operation panel 23 (step S280). When an instruction to perform reconnection is input, processing from step S100 is performed. That is, the communication connection establishment routine is executed again from the beginning.

  On the other hand, when the electronic certificate is not stored in the second storage area 42 in step S240, the electronic certificate that failed in the authentication and the electronic certificate that was in the same position in the first storage area 41 is stored in the second storage area in step S250. When it is not stored in the area 42 or when an instruction not to reconnect is input from the user via the operation panel 23 in step S280, connection establishment to the LAN 12 is stopped (step S290), and this routine Exit.

  Here, a state where the electronic certificate update process and the electronic certificate recovery process are performed will be specifically described. FIG. 5 is an explanatory diagram showing an example of the state of the first storage area 41 and the second storage area 42 when the electronic certificate is updated and restored. FIG. 5A shows a state before the update, FIG. 5B shows a state after the electronic certificate update process, and FIG. 5C shows a state after the restoration. First, as in FIG. 2, the electronic certificates A to C are stored in the first storage area 41, and the multi-function device 20 executes a communication connection establishment routine to perform authentication using the electronic certificate A and connect to the LAN 12. In this state, it is assumed that an installation command for installing a new electronic certificate D and its usage setting information is received from the user PC 50 (FIG. 5A). Then, the certificate renewal unit 35 executes the electronic certificate renewal processing routine, and since the electronic certificate A whose usage (IEEE802.1X) matches the electronic certificate D is stored in the first storage area 41, The certificate A, the usage setting information of the electronic certificate A, and the positional information “area 1” indicating the position of the electronic certificate A in the first storage area 41 are stored in the second storage area 42 in association with each other. In addition, the acquired electronic certificate D, which is a new electronic certificate, and its use setting information are overwritten in the area 1 of the first storage area 41. Thus, by executing the electronic certificate update processing routine, the new electronic certificate (electronic certificate D) is stored in the first storage area 41 as shown in FIG. The old electronic certificate (electronic certificate A) is saved in the second storage area 42.

  Thereafter, when a communication connection establishment routine is executed to establish a connection with the LAN 12 using the electronic certificate D, if there is any problem with the electronic certificate D, the MFP 20 sends a failure response from the authentication switch 60 in step S190. Receive. For example, when there is an error in the information in the electronic certificate D, the authentication server 70 confirms that the root CA certificate, intermediate CA certificate, etc. associated with the electronic certificate D by the certificate chain can be trusted. Occurs when cannot be confirmed. In addition, when the electronic certificate A is not used for IEEE802.1X, the electronic certificate A is accidentally updated due to a mistake in the setting of the usage setting information on the user PC 50. Even when there is a problem in the usage setting information of the certificate D, a failure response may be received from the authentication switch 60. When a failure response is received from the authentication switch 60 in step S190, the certificate restoration unit 36 stores the electronic certificate A in the second storage area 42, and the location information of the electronic certificate A has failed to be authenticated. The electronic certificate A in the second storage area 42 is stored in the position of the area 1 in the first storage area 41 and is overwritten on the electronic certificate D (FIG. 5 (B). c)). Thereby, when the communication connection establishment routine is executed again, the electronic certificate whose usage is IEEE 802.1X stored in the first storage area 41 is not the electronic certificate D but the electronic certificate that has been connected so far. Since it has been restored to A, the connection up to step S230 can be established without receiving a failure response in step S190. If the connection can be established, a new electronic certificate for updating the electronic certificate A from the user PC 50 can be installed again via the LAN 12.

  As described above, in the MFP 20 of the present embodiment, when the old electronic certificate is updated to the new electronic certificate, the old electronic certificate is saved in the second storage area 42 and the communication control unit 34 performs the new electronic certificate. When the communication using the electronic certificate fails, the old electronic certificate stored in the second storage area 42 is restored to the first storage area 41 so that the connection can be established.

  In the communication connection establishment routine of FIG. 3, the case where the MFP 20 is connected to the LAN 12 by the IEEE 802.1X EAP-TLS method has been described, but the same applies to the case of connecting to the network by the SSL / TLS or IPsec protocol. It is. That is, when communication using the electronic certificate in the first storage area 41 fails with SSL / TLS or IPsec protocol (for example, when a notification that there is an error in the electronic certificate is received), steps S240 to S240 are performed. The electronic certificate restoration process of S290 is performed.

  Here, the correspondence between the components of the present embodiment and the components of the present invention will be clarified. The flash memory 33 according to the present embodiment corresponds to the storage unit of the present invention, the communication I / F 26 and the communication control unit 34 correspond to the communication unit, the certificate update unit 35 corresponds to the certificate update unit, and the certificate restoration. The unit 36 corresponds to certificate recovery means, the old electronic certificate corresponds to the first electronic certificate, and the new electronic certificate corresponds to the second electronic certificate. The display unit of the operation panel 23 corresponds to a notification unit, and the printing mechanism 21 corresponds to an image forming unit. In the present embodiment, an example of the information processing method of the communication apparatus of the present invention is also clarified by describing the operation of the multifunction machine 20.

  According to the MFP 20 of the present embodiment described above, the old electronic certificate is stored in the second storage area 42 when the old electronic certificate stored in the first storage area 41 is updated to the new electronic certificate. In addition, the old electronic certificate is deleted from the first storage area 41 and the new electronic certificate is stored in the first storage area 41. When the communication using the new electronic certificate stored in the first storage area 41 fails, the old electronic certificate stored in the second storage area 42 is stored in the first storage area 41. As described above, when the old electronic certificate is updated to the new electronic certificate, the old electronic certificate is saved in the second storage area 42, and when the communication using the new electronic certificate fails, the second electronic certificate is saved. The old electronic certificate stored in the storage area 42 is restored to the first storage area 41. By doing so, there is a high possibility that the old electronic certificate has been used for communication so far, so there is a possibility that communication can be performed using the old electronic certificate stored again in the first storage area 41. That is, communication using the electronic certificate can be performed even when communication using the new electronic certificate fails.

  Further, when the multifunction device 20 updates the old electronic certificate stored in the first storage area 41 to the new electronic certificate, the old electronic certificate and the old electronic certificate stored in the first storage area 41 are used. When the communication using the new electronic certificate fails, the first information represented by the position information associated with the old electronic certificate is stored. The old electronic certificate is stored in the area of the storage area 41. For this reason, the old electronic certificate can be returned to the original position of the first storage area 41, and the first storage area 41 can be returned to a state as close as possible to the state before the update. In other words, the first storage area 41 can be returned to a state as close as possible to the state when communication using the old electronic certificate was possible. Moreover, the old electronic certificate can be reliably returned to the original position in the first storage area 41 by using the position information.

  Further, when the communication using the new electronic certificate fails, the multi-function device 20 overwrites the new electronic certificate with the old electronic certificate stored in the second storage area 42, and then creates a new one from the first storage area 41. Delete an electronic certificate. Therefore, for example, a new electronic certificate that has failed in communication once is restored, for example, communication (authentication processing) fails because the new electronic certificate is used in communication after the old electronic certificate is restored to the first storage area 41. It is possible to prevent adverse effects on subsequent communications.

  Furthermore, when communication using the new electronic certificate fails, the old electronic certificate stored in the first storage area 41 is displayed and notified to the user, so that the old one restored to the first storage area 41 is displayed. The user can be notified that there is a possibility of communication using the electronic certificate.

  In addition, when the multi-function device 20 stores the new electronic certificate in the first storage area 41, the usage setting information associated with the new electronic certificate and a plurality of electronic certificates stored in the first storage area 41 are used. Based on the usage setting information associated with each certificate, it is determined which of the plurality of electronic certificates is the old electronic certificate that should be updated to the new electronic certificate, and the determined old electronic certificate is replaced with the new one. Update to an electronic certificate. Therefore, the electronic certificate can be updated more appropriately, and it is possible to further suppress the failure of communication using the updated new electronic certificate.

  In addition, when the MFP 20 attempts communication using the new electronic certificate and receives a notification (Failure response) from the communication destination authentication switch 60 that the new electronic certificate has an error, the second memory The old electronic certificate stored in the area 42 is stored in the first storage area 41. For this reason, when communication fails due to the new electronic certificate, the old electronic certificate can be restored to the first storage area 41, and communication using the electronic certificate can be made more reliable.

  The MFP 20 is connected to the LAN 12 through authentication processing using an electronic certificate. Since the electronic certificate can be acquired via the LAN 12, the old electronic certificate can be restored and communicated. It is highly significant to apply the present invention.

  It should be noted that the present invention is not limited to the above-described embodiment, and it goes without saying that the present invention can be implemented in various modes as long as it belongs to the technical scope of the present invention.

  For example, in the above-described embodiment, as shown in FIG. 5C, the old electronic certificate stored in the second storage area 42 remains as it is after the processing of step S260 of the electronic certificate restoration processing. Although it was supposed to be, it may be deleted. For example, the old electronic certificate stored in the second storage area 42 may be deleted immediately after the old electronic certificate is stored in the first storage area 41. When the connection with the LAN 12 is successful in the first communication using the new electronic certificate installed in the first storage area 41 by performing the electronic certificate update process, the new electronic certificate is stored in the first storage area 41. The old electronic certificate stored in the second storage area 41 at the time of storage may be deleted from the second storage area 42. In this way, the old electronic certificate that is no longer needed can be quickly deleted from the second storage area 42. Thereby, while being able to open the 2nd storage area 42, it can suppress that secret information, such as personal information contained in an old electronic certificate, leaks.

  In the above-described embodiment, the number of electronic certificates that can be stored in the first storage area 41 is three, and the number of electronic certificates that can be stored in the second storage area 42 is one. One, two, three or more electronic certificates can be stored in the memory 41, or two or more electronic certificates can be stored in the second storage area 42.

  In the embodiment described above, when the old electronic certificate whose usage matches the new electronic certificate is stored in the first storage area 41 in step S320 of the electronic certificate update processing routine, the old electronic certificate and its use are used. The setting information is assumed to be stored in the second storage area 42 in association with the position information in the first storage area 41, and the position information is one of “area 1”, “area 2”, and “area 3”. Any position information may be used as long as the old electronic certificate can be returned to the original position before the update of the first storage area 41 in the electronic certificate recovery process. For example, the start address of the storage location of the old electronic certificate in the first storage area 41 may be used as the location information. Further, even if the old electronic certificate stored in the second storage area 42 is not stored in the second storage area 42 in association with the position information, the old electronic certificate is stored in the first storage area 41 before the update. What is necessary is just to return to the position which was done. For example, when the new electronic certificate is overwritten at the same position as the old electronic certificate in the electronic certificate update process, the old electronic certificate stored in the second storage area 42 in the electronic certificate recovery process is used for communication. What is necessary is just to overwrite at the same position as the new electronic certificate of the 1st storage area 41 which failed. In this case, in the electronic certificate update process, the correspondence relationship between the new electronic certificate and the old electronic certificate stored in the second storage area 42 may be stored in the flash memory 33. Alternatively, in the electronic certificate update process, the old electronic certificate is saved by copying all the information stored in the first storage area 41 before the update to the second storage area 42, and in the electronic certificate recovery process, The old electronic certificate may be restored by overwriting the entire first storage area 41 with the information stored in the second storage area 42.

  In the above-described embodiment, the MFP 20 is connected to the LAN 12 according to IEEE802.1X. However, any device that performs communication using an electronic certificate may be used. For example, the MFP 20 may be connected to the LAN 12 using another protocol. It is good. Moreover, it may be connected not only to the LAN 12 but also to another network, or may be one-to-one communication with a communication destination device using an electronic certificate without being connected to the network.

  In the above-described embodiment, the authentication server 70 is connected to the LAN 12. However, for example, a network to which the MFP 20 is connected, such as an authentication server connected to the Internet connected to the LAN 12 via a router. The authentication server 70 may be connected to a different network.

  In the embodiment described above, the multi-function device 20 acquires an electronic certificate via the LAN 12 according to an installation command from the user PC 50, but the present invention is not limited to this. For example, the electronic certificate may be acquired from the user PC 50 by directly connecting to the user PC 50 with a LAN cable or the like. Alternatively, the MFP 20 may be connected to a network that does not require authentication using an electronic certificate, and obtain an electronic certificate from a certificate authority via this network.

  In the above-described embodiment, when the failure response is received in step S190 of the communication connection establishment routine, that is, when the notification that there is an error in the electronic certificate is received from the communication destination, the old electronic certificate restoration process is performed. However, it is not limited to this. For example, when communication connection establishment fails, the old electronic certificate restoration process may be performed regardless of the reason for failure.

  In the embodiment described above, in the electronic certificate update process, it is determined that an electronic certificate whose usage matches the new electronic certificate among the electronic certificates stored in the first storage area 41 is the old electronic certificate to be updated. However, the determination is not limited to this, and any method may be used as long as the determination is made based on the attached information attached to the electronic certificate. For example, the determination may be made based on usage setting information other than the usage of the electronic certificate, or based on at least a part of information constituting the electronic certificate, such as information included in the basic area and the extended area of the electronic certificate The old electronic certificate to be renewed may be determined. In addition, an electronic certificate whose attached information matches the new electronic certificate is not limited to the old electronic certificate, and an electronic certificate having a high degree of matching of the attached information may be determined as the old electronic certificate. Furthermore, the user may specify which electronic certificate is to be updated to a new electronic certificate.

  In the embodiment described above, the electronic certificate and the usage setting information are stored in association with each other in the first storage area 41 and the second storage area 42, but the usage setting information is associated with the electronic certificate. It may not be.

  In the above-described embodiment, the restoration completion display in step S270 is performed after the old electronic certificate is stored in the first storage area 41 in step S260 of the electronic certificate restoration process. The new electronic certificate that has failed authentication may be deleted to display that the old electronic certificate before the update is restored. In this case, a screen prompting the user to input an instruction as to whether or not to restore the old electronic certificate is displayed, and the process of step S260 is performed only when the user inputs a recovery instruction via the operation panel 23. It is good. Further, the processing in step S270 is to notify the user by displaying a screen on the operation panel 23. However, for example, what kind of notification is performed, for example, by voice notification or by printing an image The method may be notified to the user.

  In the above-described embodiment, in step S260 of the electronic certificate recovery process, the old electronic certificate stored in the second storage area 42 is overwritten with the new electronic certificate in the first storage area 41. The old electronic certificate may be restored to an area different from the new electronic certificate in the one storage area 41. That is, the new electronic certificate may not be deleted when the old electronic certificate is restored.

  In the embodiment described above, the first storage area 41 and the second storage area 42 are both areas in the flash memory 33. However, the first storage area 41 and the second storage area 42 are different storage media. It is good also as what is an area | region. Further, at least one of the first storage area 41 and the second storage area 42 may be an area composed of a plurality of storage media. Further, the second storage area 42 may be an area in the nonvolatile memory such as an area in the RAM 32.

  In the embodiment described above, the certificate updating unit 35 stores the old electronic certificate in the second storage area 42 when updating the old electronic certificate stored in the first storage area 41 to the new electronic certificate. At the same time, the old electronic certificate is deleted from the first storage area 41 and the new electronic certificate is stored in the first storage area 41. However, the old electronic certificate stored in the first storage area 41 is replaced with the new electronic certificate. When updating to a certificate, the old electronic certificate is stored in the second storage area 42 and the new electronic certificate is stored in the first storage area 41 instead of the old electronic certificate. If it does, it is not restricted to this. For example, the data of the old electronic certificate stored in the flash memory 33 is not moved or deleted, and the area where the old electronic certificate has been stored is changed from the first storage area 41 to the second storage area 42. It may be changed. Also for the new electronic certificate, the new electronic certificate is stored in an area other than the first storage area 41 of the flash memory 33 instead of storing the new electronic certificate in the area that was the first storage area 41 until then. The area may be changed to the first storage area 41.

  In the embodiment described above, when communication using the new electronic certificate stored in the first storage area 41 fails, the old electronic certificate stored in the second storage area 42 is stored in the first storage area 41. However, if the communication using the new electronic certificate fails, the old electronic certificate stored in the second storage area 42 may be stored in the first storage area. For example, the old electronic certificate data itself stored in the second storage area 42 of the flash memory 33 is not moved or deleted, and the area in which the old electronic certificate has been stored is stored in the second storage area 42 so far. The first storage area 41 may be changed. In this case, the area in the first storage area 41 where the new electronic certificate has been stored is changed from the first storage area 41 to an area other than the first storage area 41 such as the second storage area 42. It is good.

  In the embodiment described above, the MFP 20 and the authentication switch 60 are connected by wire, but may be connected wirelessly.

  In the above-described embodiment, the multifunction device 20 including the printing function and the scanning function has been described. However, any communication device that performs communication using an electronic certificate may be used. For example, the present invention may be applied to a printer having only a printing function, or may be applied to a facsimile machine or the like.

  In the above-described embodiment, the communication apparatus and the image forming apparatus of the present invention have been described using an example embodied in the multi-function device 20. The steps of the information processing method may be in the form of a program for causing one or a plurality of computers to be realized.

10 Network system, 12 LAN, 20 MFP, 21 Printing mechanism, 22 Reading mechanism, 23 Operation panel, 26 Communication interface (I / F), 30 Controller, 31 CPU, 32 RAM, 33 Flash memory, 34 Communication control unit, 35 certificate update unit, 36 certificate recovery unit, 40 communication setting information, 41 first storage area, 42 second storage area, 50 user PC, 51 communication control unit, 53 storage unit, 54 communication interface (I / F) 56 communication setting information 57 client certificate 58 display 59 input device 60 authentication switch 61 communication port control unit 62 communication device authentication unit 63 storage unit 64 communication interface (I / F) 66 authentication server Information, 70 authentication server, 71 client Authentication unit, 73 storage unit, 74 communication interface (I / F), 76 credentials, 78 server certificate.

Claims (12)

Storage means having a first storage area and a second storage area capable of storing an electronic certificate;
Communication means for performing communication using an electronic certificate stored in the first storage area;
When the first electronic certificate stored in the first storage area is updated to the second electronic certificate, the first electronic certificate is stored in the second storage area, and the first electronic certificate is stored in the first storage area. A certificate updating means for making the second electronic certificate stored in the first storage area instead of the electronic certificate;
A certificate that sets the first electronic certificate stored in the second storage area to the state stored in the first storage area when the communication unit fails in the communication using the second electronic certificate Recovery measures,
Equipped with a,
When the communication means attempts the communication using the second electronic certificate and receives a notification from the communication destination that the second electronic certificate has an error, the certificate recovery means A state in which the first electronic certificate stored in the area is stored in the first storage area;
Communication device.   The certificate recovery means does not store the first electronic certificate in the first storage area when the communication fails for a reason other than the error of the second electronic certificate.
  The communication apparatus according to claim 1. The certificate restoration means, when the communication means fails in the communication using the second electronic certificate, the first electronic certificate stored in the second storage area before the update. One electronic certificate is stored in the area at the position stored in the first storage area;
The communication apparatus according to claim 1 or 2 . The certificate updating means is stored in the first storage area and the first electronic certificate when the first electronic certificate stored in the first storage area is updated to the second electronic certificate. The location information indicating the location of the first electronic certificate is associated and stored in the second storage area,
The certificate restoration means, in the first storage area represented by the position information associated with the first electronic certificate, when the communication means fails in the communication using the second electronic certificate. Storing the first electronic certificate in a location area;
The communication apparatus according to any one of claims 1 to 3 . The certificate restoration means deletes the second electronic certificate from the first storage area when the communication means fails in the communication using the second electronic certificate.
The communication apparatus according to any one of claims 1 to 4 . The communication device according to any one of claims 1 to 5 ,
Informing means for notifying that the first electronic certificate is stored in the first storage area or that the first electronic certificate is stored when the communication means fails in the communication using the second electronic certificate. ,
A communication device comprising: The storage means can store a plurality of electronic certificates in the first storage area,
The certificate renewal means, when storing the second electronic certificate in the first storage area, a predetermined attached information attached to the second electronic certificate and a plurality of information stored in the first storage area Determining which one of the plurality of electronic certificates is the first electronic certificate to be updated to the second electronic certificate based on predetermined attached information attached to each of the electronic certificates; Updating the determined first electronic certificate to the second electronic certificate;
The communication apparatus of any one of Claims 1-6 . The certificate restoration means deletes the first electronic certificate stored in the second storage area when the communication means succeeds in the communication using the second electronic certificate.
The communication device according to any one of claims 1 to 7 . The communication means performs the communication by connecting to a predetermined network by authentication using an electronic certificate stored in the first storage area,
The certificate update means can acquire the electronic certificate via the network.
The communication apparatus according to any one of claims 1 to 8. The communication device according to any one of claims 1 to 9,
An image forming means capable of forming an image based on image data acquired by the communication by ejecting a fluid on a medium;
An image forming apparatus. A communication apparatus comprising: storage means having a first storage area and a second storage area capable of storing an electronic certificate; and communication means for performing communication using the electronic certificate stored in the first storage area Information processing method,
(A) When updating the first electronic certificate stored in the first storage area to the second electronic certificate, the first electronic certificate is stored in the second storage area; Placing the second electronic certificate in the first storage area instead of the first electronic certificate;
(B) When the communication means fails in the communication using the second electronic certificate, the first electronic certificate stored in the second storage area is stored in the first storage area. And steps to
Only including,
In the step (b), when the communication means tries the communication using the second electronic certificate and receives a notification from the communication destination that the second electronic certificate has an error, the second storage A state in which the first electronic certificate stored in the area is stored in the first storage area;
Information processing method of communication apparatus. The program which makes each step of the information processing method of Claim 11 implement | achieve at one or more computers.

Images